According to Verizon's 2015 Data Breach Investigation Report, approximately 20% percent of data breaches come from an internal source. This requires a change in an issuer's culture compliance to combat the problem.